$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft File: 21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft (raw, json) Hash identifier: cE6qRIbu/oONiphk2yrBsdpLqOJhRVWS0CE5OhBHLNw= Subject key identifier: A7:07:DA:71:64:31:86:8E:E1:28:44:89:7F:47:6F:53:C4:E5:C5:F7 Authority key identifier: 21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 Certificate issuer: /CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Certificate serial: 0E3E67A66C40CE7DB9D5303B6AF5E05C27396720 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft Manifest number: F1 Signing time: Fri 16 Oct 2026 04:47:14 +0000 Manifest this update: Fri 16 Oct 2026 04:42:14 +0000 Manifest next update: Mon 19 Oct 2026 10:04:14 +0000 Files and hashes: 1: AS18241.roa (hash: KghwJGsdAFwKKaHyAzU5cWOTx1CTSMYVyT97Iq5hIVw=) 2: 21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl (hash: NTzP2U+RRWDRWEtCBe5UxD4+JFrXHY2VjvOXaolo/og=) 3: AS9814.roa (hash: aH13hMU8C8fNHVLNKEaUevRiNr6V/+fHSBOg4b/U2Rw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 10:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:3e:67:a6:6c:40:ce:7d:b9:d5:30:3b:6a:f5:e0:5c:27:39:67:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Validity Not Before: Oct 16 04:42:14 2026 GMT Not After : Oct 19 10:04:14 2026 GMT Subject: CN=A707DA716431868EE12844897F476F53C4E5C5F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:89:34:38:df:b5:6d:f6:e4:23:14:37:e8:2a: cf:70:8a:4c:1e:c1:20:01:f1:9f:f7:f5:f6:b6:d9: 3b:bf:52:f2:21:8a:6c:b1:10:e3:5a:45:29:c3:fa: 2b:e9:99:f0:df:a6:26:7d:2d:fa:2a:a5:54:6e:f2: 4f:f9:31:e0:5f:c8:40:68:f3:72:c0:81:5a:60:37: ba:1a:64:ee:bf:90:02:19:ca:b0:05:68:ee:e8:1a: 29:68:cd:14:ae:92:4c:48:c7:8e:be:9b:6e:8a:89: 8a:90:5b:8d:47:41:8c:e9:33:81:aa:1f:1d:05:e1: c7:3f:35:04:59:85:f5:44:16:19:a4:08:86:c3:e9: 8e:fa:af:de:4c:6a:0a:b7:6e:08:9c:44:c7:f8:a8: 33:9c:60:dc:32:20:c8:fb:d1:c2:aa:a6:28:96:6a: 42:7f:8e:e7:d9:13:0e:86:b6:72:2b:ab:82:97:16: a3:8d:e2:6b:42:7a:4c:36:c7:f2:01:26:42:78:2b: 73:8c:65:72:74:d1:6b:6b:a8:43:d7:d9:dd:97:74: 36:f6:b4:3d:53:5f:8e:87:c3:1e:59:e2:6c:85:a9: 24:69:91:3e:4e:be:ed:c9:11:7e:2e:78:ef:86:83: 7f:96:11:4f:9b:c4:6a:4b:18:2b:1b:7f:d5:08:ce: f6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:07:DA:71:64:31:86:8E:E1:28:44:89:7F:47:6F:53:C4:E5:C5:F7 X509v3 Authority Key Identifier: keyid:21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d2:7e:1f:e8:ee:4e:34:e1:f8:b4:9a:3d:8c:4a:7b:91:a5: c6:61:78:3e:db:ff:c6:8a:8e:f1:92:c7:d7:ca:bc:96:c5:42: 47:07:d0:29:a2:3b:01:ed:aa:a8:c2:63:40:c6:2c:2c:b3:56: 86:4f:6c:5f:45:64:19:55:e1:ae:c6:23:ca:d7:ef:ec:b0:67: 1b:17:90:b9:86:18:3b:fc:9a:01:25:3c:84:06:df:0b:ad:81: 1f:83:c6:bc:a0:de:92:d6:c4:d6:17:15:94:05:09:fc:17:fe: 45:bc:2b:e4:cb:5a:05:2c:70:18:8e:29:a5:8d:69:27:de:1a: 4c:ee:8f:6b:59:b3:31:96:52:0f:b0:e3:6a:d4:53:fc:2d:6f: 11:b4:8a:16:ec:59:ee:5a:8f:e0:1e:20:48:bf:85:2b:9e:c4: 19:3c:14:62:ab:8c:01:13:fa:7b:15:9f:6a:97:53:63:79:f5: 97:62:de:8f:57:b3:cc:e3:eb:b7:81:b7:5a:ac:b4:34:56:ca: 23:b1:9c:c4:e6:48:26:32:9a:fc:b5:88:d7:12:30:65:2c:d5: cf:8a:6d:48:e5:e9:d2:06:42:c3:12:90:a3:7c:90:46:69:20: e4:4d:a4:de:13:0c:ce:c9:8b:80:c9:af:e9:dc:a6:f8:df:2e: 51:28:0f:74 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDj5npmxAzn251TA7avXgXCc5ZyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJB NjJBMkREODAeFw0yNjEwMTYwNDQyMTRaFw0yNjEwMTkxMDA0MTRaMDMxMTAvBgNV BAMTKEE3MDdEQTcxNjQzMTg2OEVFMTI4NDQ4OTdGNDc2RjUzQzRFNUM1RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwiTQ437Vt9uQjFDfoKs9wikwe wSAB8Z/39fa22Tu/UvIhimyxEONaRSnD+ivpmfDfpiZ9LfoqpVRu8k/5MeBfyEBo 83LAgVpgN7oaZO6/kAIZyrAFaO7oGilozRSukkxIx46+m26KiYqQW41HQYzpM4Gq Hx0F4cc/NQRZhfVEFhmkCIbD6Y76r95Magq3bgicRMf4qDOcYNwyIMj70cKqpiiW akJ/jufZEw6GtnIrq4KXFqON4mtCekw2x/IBJkJ4K3OMZXJ00WtrqEPX2d2XdDb2 tD1TX46Hwx5Z4myFqSRpkT5Ovu3JEX4ueO+Gg3+WEU+bxGpLGCsbf9UIzvbFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpwfacWQxho7hKESJf0dvU8TlxfcwHwYDVR0j BBgwFoAUIeKnCwV4xnSwvx/XvrO5sqYqLdgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI0MTY2NjY5Nzg1NDk3OS8wLzIxRTJBNzBCMDU3OEM2NzRCMEJGMUZEN0JFQjNC OUIyQTYyQTJERDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJBNjJBMkREOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNDE2NjY2OTc4NTQ5NzkvMC8yMUUyQTcwQjA1NzhD Njc0QjBCRjFGRDdCRUIzQjlCMkE2MkEyREQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNJ+H+juTjTh +LSaPYxKe5GlxmF4Ptv/xoqO8ZLH18q8lsVCRwfQKaI7Ae2qqMJjQMYsLLNWhk9s X0VkGVXhrsYjytfv7LBnGxeQuYYYO/yaASU8hAbfC62BH4PGvKDektbE1hcVlAUJ /Bf+Rbwr5MtaBSxwGI4ppY1pJ94aTO6Pa1mzMZZSD7DjatRT/C1vEbSKFuxZ7lqP 4B4gSL+FK57EGTwUYquMARP6exWfapdTY3n1l2Lej1ezzOPrt4G3Wqy0NFbKI7Gc xOZIJjKa/LWI1xIwZSzVz4ptSOXp0gZCwxKQo3yQRmkg5E2k3hMMzsmLgMmv6dym +N8uUSgPdA== -----END CERTIFICATE-----Generated at Sat Oct 17 05:03:29 2026 by rpki-client